Tplink vulnerabilities
We track 3 vulnerabilities in Tplink products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2024.
3vulnerabilities
0critical
3high
0exploited
8.4average CVSS score
Latest Tplink vulnerabilities
- 7.6 High severity
kasa_kp125m: Improper Privilege Management
An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users.
- 8.8 High severity
tl-er5120g: Improper Neutralization of Special Elements used in a Command
TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT rules after authentication, and the rule name has an injection point.
- 8.8 High severity
tl-er5120g: Improper Neutralization of Special Elements used in a Command
TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points.